Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa
File:                     4ccd42f4-0724-3487-8445-a44356895c00.roa (raw, json)
Hash identifier:          hqqkQp1PbZjQuxWCKzJc9g4zy9MJv9LFr++zgVmBF+c=
Subject key identifier:   74:07:F9:84:91:A8:1A:2F:BF:60:FF:0A:74:CA:F4:1A:7B:50:34:ED
Certificate issuer:       /CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef
Certificate serial:       010D0C9F43285848A400BD68160F9F6CA8F384C0
Authority key identifier: 1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     14936
IP address blocks:        161.129.62.0/24 maxlen: 24
                          2620:30:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:bd:68:16:0f:9f:6c:a8:f3:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=2686233a-bf21-48ad-9dda-c9ed9f83e55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6f:3a:87:e5:21:ef:56:4a:a8:a3:4d:bb:1d:
                    f4:e0:c6:58:69:c1:6e:ec:0a:c4:4e:68:d4:eb:71:
                    5e:b8:9b:bc:ef:a8:3a:bc:4e:41:31:b9:3a:bd:f7:
                    bb:9f:6d:27:90:e8:d2:2c:17:ee:2e:7b:94:04:73:
                    6e:3f:16:60:7b:34:7a:fd:f0:f1:6b:7a:92:4f:35:
                    ab:17:be:24:41:b4:bb:83:2d:0f:40:d1:d7:a7:bd:
                    85:a3:0b:c8:90:b7:23:2c:48:a8:3b:b9:b6:8e:95:
                    de:b0:7b:98:5d:48:36:b4:d1:57:4f:62:0c:83:ff:
                    55:6d:d2:87:67:5d:0d:90:40:6c:5e:03:1f:d7:43:
                    ef:da:95:ab:e1:b0:9d:69:e9:fc:f0:e2:f8:d6:27:
                    43:ee:7a:3a:8b:5a:d2:72:85:2f:c9:10:7c:6f:0a:
                    56:38:20:85:51:eb:bd:fc:ea:09:76:84:8c:cd:6c:
                    1e:be:10:98:10:3e:c5:38:0b:f9:57:ae:e1:98:fc:
                    c0:31:e9:f4:f0:1c:1c:7f:46:e9:00:1a:f0:d0:f7:
                    56:17:a7:c9:c8:b9:ce:66:94:1d:ea:b8:6a:e2:47:
                    6c:ae:c9:35:5e:0e:28:ba:63:ac:ec:ef:49:76:9d:
                    94:1f:72:75:19:fb:d3:1d:20:9b:31:2f:ab:66:36:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:07:F9:84:91:A8:1A:2F:BF:60:FF:0A:74:CA:F4:1A:7B:50:34:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.crl

            X509v3 Authority Key Identifier:
                keyid:1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.62.0/24
                IPv6:
                  2620:30:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a0:b3:31:3d:37:69:8b:5a:47:4b:d3:0a:e8:be:e9:80:6d:
         95:59:20:7e:14:dc:c9:03:c2:72:be:e8:38:30:c8:36:7a:16:
         36:3c:72:a7:fb:0a:2c:00:72:17:b6:ea:f4:3b:90:c1:42:c2:
         58:bf:40:61:dc:8f:d4:0a:ec:07:70:eb:7b:d3:ee:7a:91:93:
         93:74:8a:87:ad:c4:dc:9c:00:4b:4c:d9:52:9c:72:78:36:36:
         2a:06:e6:40:0a:68:63:f7:ce:59:61:e5:d7:db:f9:6c:09:4a:
         f7:aa:26:40:af:36:9f:0a:a4:31:80:48:17:75:3f:8d:cd:3a:
         7a:c2:0a:69:da:60:03:99:93:8b:98:46:50:ee:1a:49:b6:7a:
         f1:24:16:61:08:44:6a:64:d1:50:6b:20:d7:9c:4e:5b:d0:32:
         df:fa:71:c0:5c:1b:de:39:35:e9:2f:75:56:e3:4e:5a:69:47:
         78:8a:e5:28:dc:27:7d:15:d0:18:bd:d5:70:e2:af:52:c7:d5:
         75:8e:3e:39:e8:d5:f3:d7:af:46:bb:87:9a:6a:f5:ec:d5:ac:
         50:eb:51:83:25:0e:2e:63:e4:b7:13:55:7d:f2:f7:44:12:fd:
         c4:cd:9f:8b:9c:25:ca:38:38:7d:36:3d:a4:92:23:27:6a:81:
         fe:3c:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:51 2025 by rpki-client